@horsefacts.eth

fake RAIL was a backdoored token contract. this section lets the attacker forge permit signatures and transfer any user's balance in the contract. this scam is common enough that you can often recognize it from this snippet: if there's weird assembly in here and you don't see "ecrecover" anywhere, it's a backdoor.

4 replies

6 recasts

20 reactions